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DETAILED ACTION 

Continued Examination Under 37 CFR 1.114 

This Office Action is in response to Applicant's Remarks and Amendments filed 
November 15, 2007. 

Claims 1,16, and 27 have been amended. 

Claims 1, 3-14, 16, 18-25, 27, 29-36, and 38-52 are pending and herein 
considered. 

Response to Arguments 

Applicant's arguments with respect to claims 1, 3-14, 16, 18-25, 27, 29-36, and 
38-52 have been considered but are not persuasive. 

Applicants arguments concern Guheen's alleged failure to "disclose, either 
expressly or inherently, retrieving a workflow from a set of workflows for responding to a 
request for a certificate related action, e.g., enrollment, renewal, or revocation" and 
Guheen's alleged failure to disclose "wherein the workflow corresponds to the certificate 
related action and a set of characteristics for a user." The Examiner respectfully 
disagrees with Applicant, drawing attention to paragraphs 502-514, beginning with 
Guheen's disclosure of "workflow management tools" in 504 "providing the ability to 
define, manage and execute automated business processes through an electronic 
representation of the process, both in terms of what has to be done and by whom" 
Guheen goes on to disclose in paragraph 508 how tasks are fit together to form 
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workflows. In paragraph 51 1 , Guheen goes so far as to describe the role of individuals 
within the workflow management system, their roles and tasks , their relationships and 
even the assignment of cases to individuals. Directly proceeding the paragraphs 
specifically laying out "workflows" are those disclosing the necessary security 
management tools included within the system, including but not limited to the "public 
key infrastructure" laid out in 514. Guheen's public-key infrastructure, or PKI as it is 
referred to, "enables the use of encryption, digital signatures, and authentication 
services across a wide variety of applications" including the management of "keys and 
certificates." It is at this point, that the Examiner would also like to draw attention to 
Guheen's chart in columns 23-24 providing for a detailed listing of the capabilities and 
tasks of particular program products, including a "Business2 Certificate Management 
System" which "issues and managed digital certificates for extranet and e-commerce 
applications. Last but not least, attention is directed towards paragraphs 2644-2645 
wherein Guheen provides for the "client services component" of his invention which 
"manages client certificates used for user authentication." It is based upon these 
particular portions of the reference in view of the reference in its entirety that the 
Examiner maintains her belied that Guheen provides not only for the retrieval of a 
workflow from a set of workflows, but that those workflows may be in response to a 
request for a certificate related action, including but not limited to the "issuance and 
management" or "enrollment, renewal, or revocation" as Applicant prefers to refer to it. 
Furthermore, the Examiner maintains her position that Guheen's workflows correspond 
to particular actions (including certificate related actions such as enrollment, renewal 
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and revocation) as well as particular user characteristics as suggested by Guheen's 
teachings concerning particular tasks associated with particular individuals as well as 
relationship between those workflows and the individual. 

It is based upon the above made arguments that the Examiner maintains those 
rejections put forth in the prior Office Action and included below, amended to reflect 
Applicant's amendments to the claims. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(e) the invention was described in a patent granted on an application for patent by 
another filed in the United States before the invention thereof by the applicant for 
patent, or on an international application by another who has fulfilled the 
requirements of paragraphs (1), (2), and (4) of section 371(c) of this title before the 
invention thereof by the applicant for patent. 

Claims 1, 3-14, 16, 18-25, 27, 29-36, and 38-52 are rejected under 35 
U.S.C. 102(e) as being anticipated by Guheen et al., U.S. Patent No. 6,519,571. 

As per claim 1, Guheen et al. discloses a method comprising: 
receiving at an Identity System a request for a certificate related action for a user 
wherein the certificate related action is selected from a group consisting of a certificate 
enrollment action, a certificate renewal action, and a certificate revocation action (col 
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23-24 "Business2 Certificate Management System"; pars 493-495, 502-514; 2644- 
1647); and 

retrieving by the Identity System a workflow for responding to said request from a 
set of workflows, wherein said set of workflows includes a plurality of workflows for 
responding to said certificate related action (pars 502-511); 

wherein each workflow in said plurality of workflows corresponds to a different 
set of characteristics for a user wherein said workflow for responding to said request 
corresponds to said certificate related action and a set of characteristics for said user 
from an identity profile maintained by the Identity System, the set of characteristics 
including a user type (pars 2, 11, 472, 518, 591, 801, 804, 2077), and 

wherein retrieving the workflow further comprises selecting the workflow from a 
plurality of workflows based on the requested certificate related action and the user type 
(pars 2078, 2110, 2160, 2161, 2169, 2170-2171). 

As per claim 3, Guheen et al. discloses wherein a first workflow in said plurality 
of workflows contains a first set of directives and a second workflow in said plurality of 
workflows contains a second set of directives, wherein said first set of directives is 
different from said second set of directives (pars 502-51 1 ; 2170-2171). 

As per claim 4, Guheen et al. discloses wherein said certificate related action is 
a certificate enrollment action, wherein said first workflow in said plurality of workflows 
calls for obtaining an approval before issuing a certificate and wherein said second 
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workflow in said plurality of workflows does not call for obtaining an approval before 
issuing a certificate (pars 502-514; 2135-2141, 2331-2346). 

As per claim 5, Guheen et al. discloses wherein said certificate related action 
certificate renewal action, wherein said first workflow in said plurality of workflows calls 
for retrieving an approval before renewing a certificate and wherein said second 
workflow in said plurality of workflows does not call for retrieving an approval before 
renewing a certificate (pars 2135-2141; 2331-2346). 

As per claim 6, Guheen et al. discloses wherein said certificate related action is 
a certificate revocation action (pars 3, 514, 2135-2141). 

As per claim 7, Guheen et al. discloses receiving said plurality of workflows (pars 
502-511). 

As per claim 8, Guheen et al. discloses performing said workflow, wherein 
performing said workflow comprises: retrieving an approval response; and obtaining a 
certificate (pars 2135-2141; 2331-2346). 

As per claim 9, Guheen et al. discloses receiving a second request for a second 
certificate related action for a second user (pars 493-495, 2644-1647); retrieving a 
second workflow for responding to said second request from said set of workflows, 
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wherein said second workflow corresponds to said second certificate related action and 
a set of characteristics for said second user (pars 502-51 1); and performing said second 
workflow, wherein performing said second workflow comprises obtaining a second 
certificate without retrieving an approval response (pars 2135-2141; 2331-2346). 

As per claim 10, Guheen et al. disclose wherein said certificate related action is 
a certificate enrollment action and said second certificate related action is a certificate 
enrollment action (pars 3, 514, 2135-2141). 

As per claim 11, Guheen et al. discloses wherein said certificate related action is 
a certificate renewal action and said second certificate related action is a certificate 
renewal action (pars 3, 514, 2135-2141). 

As per claim 12, Guheen et al. discloses performing said workflow, wherein said 
certificate related action is a certificate enrollment action (pars 2135-2141, 2331-2346) 
and wherein performing said workflow comprises obtaining a certificate, wherein 
obtaining the certificate comprises authenticating said user, forwarding said request to a 
Certificate Processing Server, receiving said certificate, and storing said certificate (pars 
3, 514,2135-2141). 

As per claim 13, Guheen et al. discloses performing said workflow, wherein said 
certificate related action is a certificate renewal action (pars 2135-2141, 2331-2346) and 
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wherein performing said workflow comprises obtaining a certificate renewal, wherein 
obtaining the certificate renewal comprises authenticating said user, forwarding said 
request to a Certificate Processing Server, and receiving a certificate renewal 
acknowledgement (pars 3, 514, 2135-2141). 

As per claim 14, Guheen et al. discloses performing said workflow, wherein said 
certificate related action is a certificate revocation action (pars 2135-2141, 2331-2346) 
and wherein performing said workflow comprises revoking a certificate, wherein 
revoking the certificate comprises authenticating said user, and forwarding said request 
to a Certificate Processing Server (pars 3, 514, 2135-2141). 

Claims 16, 18 and 19 are directed towards a system's implementation of the 
method of claims 1 , 3 and 4 and are rejected by similar rationale. 

Claim 20 is directed towards a system's implementation of the method of claim 7 
and is rejected by similar rationale. 

Claims 21 and 22 are directed towards a system's implementation of the method 
of claims 9 and 10 and are rejected by similar rationale. 

Claims 23-25 are directed towards a system's implementation of the method of 
claims 12-14 and are rejected by similar rationale. 

Claims 27, 29 and 30 are directed towards an apparatus' implementation of the 
method of claims 1 , 3, and 4 and are rejected by similar rationale. 
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Claim 31 is directed towards an apparatus' implementation of the method of 
claim 7 and is rejected by similar rationale. 

Claims 32 and 33 are directed towards an apparatus 1 implementation of the 
method of claims 9 and 10 and are rejected by similar rationale. 

Claims 34-37 are directed towards an apparatus 1 implementation of the method 
of claims 12-15 and are rejected by similar rationale. 

Claim 38 is directed towards the method of claim 2 and is rejected by similar 
rationale. 

Claims 39, 40, and 42 are directed towards the method of claims 7, 9, and 15 
and are rejected by similar rationale. 

Claim 41 is directed towards a broader form of the method of claims 10 and 1 1 
and is rejected by similar rationale. 

Claim 43 is directed towards a system's implementation of the method of claim 2 
and is rejected by similar rationale. 

Claims 44, 45, and 47 are directed towards a system's implementation of the 
method of claims 7, 9, and 15 and are rejected by similar rationale. 

Claim 46 is directed towards a broader form of a system's implementation of the 
method of claims 10 and 11 and is rejected by similar rationale. 

Claim 48 is directed towards an apparatus's implementation of the method of 
claim 2 and is rejected by similar rationale. 

Claims 49, 50, and 52 are directed towards an apparatus' implementation of the 
method of claims 7, 9, and 15 and are rejected by similar rationale. 
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Claim 51 is directed towards a broader form of an apparatus 1 implementation of 
the method of claims 10 and 11 and is rejected by similar rationale. 



Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Tamara Teslovich whose telephone number is (571) 

272- 4241. The examiner can normally be reached on Mon-Fri 8-4:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Emmanuel Moise can be reached on (571) 272-3865. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 

273- 8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 




